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Claims 



1 . A method for controlling establishing a network connection between a 
client and a network comprising the phases of authenticating, 
authorizing, and accounting, comprising a further interim negotiation 
phase of negotiating a connection or business mode of authorization and 
accounting. 

2. The method according to claim 1, comprising further an additional 
initialization phase synchronizing the underlying business model. 

3. The method according to claim 1, providing a user interface means for 
involving a user in the further interim negotiation phase. 

4. The method according to claim 1, wherein the negotiating comprises 
connection policy-framework compliant solution. 

5. A network access system comprising a network access client device connected 
to at least one network via a network access trader device, said network 
access client device comprising a connection controller for controlling the 
access to said at least one network, characterized by further comprising a 
business logic inference machine and memory for business logic specifying 
business rules and connection behavior, said connection controller uses the 
business logic for negotiating a connection or business mode with a 
network access trading device of said at least one network, and said network 
access trading device comprising a second connection controller for 
controlling the access to said at least one network from said at least one 
network access client device, and a second business logic inference machine 
and memory for business logic specifying business rules and connection 
behavior, said connection controller uses the business logic for negotiating a 
connection or business mode with said at least one network access client 
device and for authorization and accounting said connection. 
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6. A network access client device connected to at least one network comprising a 
connection controller for controlling the access to said at least one network, 
characterized by further comprising a business logic inference machine and 
memory for business logic specifying business rules and connection behavior, 
said connection controller using the business logic for negotiating a 
connection or business mode with a network access trading device of said 
at least one network. 

7. A network access trading device connected to at least one network access 
client device, the network access trading device comprising a connection 
controller for controlling the access to said at least one network from said at 
least one network access client device, further comprising a business logic 
inference machine and memory for business logic specifying business rules 
and connection behavior, said connection controller using the business logic 
for negotiating a connection or business mode with said at least one 
network access client device and for authorization and accounting said 
connection. 

8. A network access trading device according to claim 7, wherein the network 
access trading device is a network access server. 

9. A computer software product, characterized by comprising programming 
means for performing the method according to claim 1 . 



